A method for fault detection is adapted for a vehicle display fault detection system. The vehicle display fault detection system includes a vehicle system and a display system. The method for fault detection includes following steps: detecting whether a first state of the display system is abnormal or not; when the first state is abnormal, the display system is configured to generate a fault detection signal; classifying to generate a control signal according to the fault detection signal; and adjusting the first state of the display system to a second state.

An electrically controlled differential gear is disposed between a right front wheel and a left front wheel of a vehicle. The electrically controlled differential gear includes a clutch mechanism that limits a differential operation of the electrically controlled differential gear. A second ECU (control portion) obtains information as to failure associated with actuation of a right front electric brake mechanism. The second ECU obtains a physical amount relating to a required braking force which is applied to the left front wheel and the right front wheel. The second ECU outputs a differential limiting control command for limiting the differential operation of the electrically controlled differential gear to the clutch mechanism (or more specifically, a differential ECU that controls the clutch mechanism) based on the information as to the failure and the physical amount relating to the required braking force.

An electrically controlled differential gear is disposed between a right front wheel and a left front wheel of a vehicle. The electrically controlled differential gear includes a clutch mechanism that limits a differential operation of the electrically controlled differential gear. A second ECU (control portion) obtains information as to failure associated with actuation of a right front electric brake mechanism. The second ECU obtains a physical amount relating to a required braking force which is applied to the left front wheel and the right front wheel. The second ECU outputs a differential limiting control command for limiting the differential operation of the electrically controlled differential gear to the clutch mechanism (or more specifically, a differential ECU that controls the clutch mechanism) based on the information as to the failure and the physical amount relating to the required braking force.

A vehicle and a system method of operating the vehicle is disclosed. The system includes a monitoring module and a mitigation module operating on a processor. The monitoring module is configured to measure a degradation in an operation parameter of the vehicle, the vehicle operating in a first state based on a first value of a set of adaptive parameters. The mitigation module is configured to determine a threat to the vehicle due to operating the vehicle in the first state with the degradation in the operation parameter and adjust the set of adaptive parameters from the first value to a second value that mitigates the threat to the vehicle, wherein the processor operates the vehicle in a second state based on the second value.

Devices, systems, and methods for a vehicular safety system in autonomous vehicles are described. An example method for safely controlling a vehicle includes selecting, based on a first control command from a first vehicle control unit, an operating mode of the vehicle, and transmitting, based on the selecting, the operating mode to an autonomous driving system, wherein the first control command is generated based on input from a first plurality of sensors, and wherein the operating mode corresponds to one of (a) a default operating mode, (b) a minimal risk condition mode of a first type that configures the vehicle to pull over to a nearest pre-designated safety location, (c) a minimal risk condition mode of a second type that configures the vehicle to immediately stop in a current lane, or (d) a minimal risk condition mode of a third type that configures the vehicle to come to a gentle stop.

Devices, systems, and methods for a vehicular safety system in autonomous vehicles are described. An example method for safely controlling a vehicle includes selecting, based on a first control command from a first vehicle control unit, an operating mode of the vehicle, and transmitting, based on the selecting, the operating mode to an autonomous driving system, wherein the first control command is generated based on input from a first plurality of sensors, and wherein the operating mode corresponds to one of (a) a default operating mode, (b) a minimal risk condition mode of a first type that configures the vehicle to pull over to a nearest pre-designated safety location, (c) a minimal risk condition mode of a second type that configures the vehicle to immediately stop in a current lane, or (d) a minimal risk condition mode of a third type that configures the vehicle to come to a gentle stop.

Provided is a vehicle control device configured to: recognize a surrounding situation of a vehicle; control steering and acceleration/deceleration of the vehicle; detect operation states of a plurality of external recognition sensors; determine a driving mode of the vehicle as any one of a plurality of driving modes including a first driving mode, a second driving mode, and a third driving mode; change the third driving mode to either one of the first driving mode and the second driving mode when determining that a failure has occurred in one of the plurality of external recognition sensors that implement: a function of causing the vehicle to follow a preceding vehicle; and a function of assisting the vehicle in keeping a lane; and change the third driving mode to the second driving mode when determining that degradation in performance has occurred in one of the plurality of external recognition sensors.

Provided is a vehicle control device configured to: recognize a surrounding situation of a vehicle; control steering and acceleration/deceleration of the vehicle; detect operation states of a plurality of external recognition sensors; determine a driving mode of the vehicle as any one of a plurality of driving modes including a first driving mode, a second driving mode, and a third driving mode; change the third driving mode to either one of the first driving mode and the second driving mode when determining that a failure has occurred in one of the plurality of external recognition sensors that implement: a function of causing the vehicle to follow a preceding vehicle; and a function of assisting the vehicle in keeping a lane; and change the third driving mode to the second driving mode when determining that degradation in performance has occurred in one of the plurality of external recognition sensors.

An autonomous driving control system, comprising a main control system and a backup control system. The main control system comprises a main control module and main execution modules, and the backup control system comprises a backup control module and backup execution modules; the main control module monitors an operating status of the main control system in real time; the main control module further sends, when detecting that a failure occurs in the main control system, a failure notification to the backup control module, and sends a response termination control instruction to each of the main execution modules, the response termination control instruction being a control instruction for instructing each of the main execution modules not to respond to any control over a vehicle; and the backup control module controls, after receiving the failure notification, the backup execution modules to start to execute a backup control instruction.

An autonomous driving control system, comprising a main control system and a backup control system. The main control system comprises a main control module and main execution modules, and the backup control system comprises a backup control module and backup execution modules; the main control module monitors an operating status of the main control system in real time; the main control module further sends, when detecting that a failure occurs in the main control system, a failure notification to the backup control module, and sends a response termination control instruction to each of the main execution modules, the response termination control instruction being a control instruction for instructing each of the main execution modules not to respond to any control over a vehicle; and the backup control module controls, after receiving the failure notification, the backup execution modules to start to execute a backup control instruction.